This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! upgrading active passive panorama from 8.0 to 8.1.3

panorama is in active passive mode.need to upgrade from 8.8.x to 8.1.3 so i can upgrade the passive device first all the way from 8.0 to 8.1.3?then do the failover then upgrade the previous active one?? also panorama can still manage the PA running 8.0x right?

MP18 by • Cyber Elite
  • 2346 Views
  • 1 replies
  • 0 Likes

HA sync time

I have 400 rules and it takes my PA 5050 HA pair 4 minutes to sync, that seesm long to me anyone else know their sync times or what should be a reasonable time?

jdprovine by • L4 Transporter
  • 6724 Views
  • 8 replies
  • 0 Likes

GlobalProtect Install issues

having a bit of a weird issue. I believe it may be related to some of my security setting in GPO, but I can't tell what. When users download one of the 4.1 releases of the GlobalProtect clients, the install will go through the first screen or two, ask for elevated privlidges, then say it can't install (A program run as part of the setup did n...

GlobalProtect - Understand Client side Logs

Hi Guys, We are doing a global protect deployment and I'm new to this area. Time to time we have some users with poor performance or freequent disconnects from global protect who send us log fles.I have tried to search documentation that could provide information around global protect logs files.I need to understand difference of each log files ...

Namalw by • L1 Bithead
  • 5481 Views
  • 1 replies
  • 0 Likes

Url filtring

Hello all, Actualy we have 2 PA 3020 firewall in our company, we have some issue with the option URL filtring. we have a policy block all user to acces to the web page with category (ex: games ...) in the monitor, I find the users who are bloked but i can't find who are allowed. there are some users working with proxy (web plugin), how can i id...

Session browser vs. traffic logs

Hi all,Maybe someone can help to bring some light on my question. I'm trying to determine the difference between the session browser and the traffic logs. Why it is that when I search on a rule in the traffic logs I see specific traffic that is not in the session browser? I'm trying to remove a rule from our firewall by first seeing if other rul...

Resolved! PA-3020 vs PA-850

Hi,I am in the process to purchase a new pair of firewalls (in active/passive setup), but I am stuck in selecting PA-3020 or PA-850.While the tech specifications are similar, the cost is not.Additionally, the PA-3020 is around since a while, so I am more oriented to purchase the PA-850.This is going to serve a 350-people office, and I will need ...

AMoretti by • L1 Bithead
  • 9545 Views
  • 4 replies
  • 0 Likes

Resolved! ssl decryption enabled and proxy_wait_pkt_drop

ssl decryption is enabled on PA.sh running resource monitor is also normal. when i run below command i see show counter global filter delta yes category proxyGlobal counters:Elapsed time since last sampling: 124.323 secondsname value rate severity category aspect description------------------------------------------------------------------------...

MP18 by • Cyber Elite
  • 3926 Views
  • 4 replies
  • 0 Likes

global protect client unable to connect windows xp

Hi Team can anyone help me with below issue We are having an issue with Global protect VPN connections from the Windows XP operating system.We can connect to the SSL VPN via the browser and download the Global protect client. But the issue is when you try to connect by entering the credential from the Global protect a client, it gives an error "...

HemanthV by • L2 Linker
  • 5532 Views
  • 3 replies
  • 0 Likes

Resolved! Bug: Multiple Portals work only on GlobalProtect 4.1.0

Good day all, i was enthusiastic when 4.1.0 appeared, because this version finally allowed to manage connections to many PAN portals in a very easy way.Sadly, in 4.1.1, 4.1.2, 4.1.3,4.1.4,4.1.5,4.1.6 this is no longer working! The dropdown menu is not active, and the buttons Add/Delete/Edit in Portals config window are missing. I'm pretty sure ...

Resolved! recommended version of Panorama 8.1?

I have new PA that has come with 8.1 version.Currently we have PA and PAnorama running on version 8.0.9. Which is the recommended version of PAnorama in 8.1?

MP18 by • Cyber Elite
  • 3629 Views
  • 3 replies
  • 0 Likes

moving firewall from one device group to another

I have one parent device group with 7 firewalls.I have created 2 new device groups and i need to move 4 firewalls from the parent device group into these 2 new device groups.so each new device group will have 2 firewalls each. right now issue is that when we push policy to 1 firewall it does out of syn for remaining.As all these firewalls nee...

MP18 by • Cyber Elite
  • 6052 Views
  • 6 replies
  • 0 Likes

Resolved! does panorama gets local config from firewall

On one of education videos it says that in background panorma talks to firewall every 90 mins or so and pulls whole configfrom palo alto(local config on palo alto and global config pushed via panorama? Need to confirm if we have local config on palo alto and that firewall dies then will panorama have whole config of that firewall?

MP18 by • Cyber Elite
  • 4735 Views
  • 6 replies
  • 0 Likes

Resolved! PA not installing antivirus automatically

On Active PAssive PA both devices are configured to download and install the antivirus every hour.Today PAssive PA installed the software but on Active it only downloaded the antivirus update. I need to manually install the antivirus on the active PA. below is fail reason how jobs id 34946Enqueued Dequeued ID Type Status Result Completed--------...

MP18 by • Cyber Elite
  • 3973 Views
  • 2 replies
  • 0 Likes

Resolved! Single packet threat pcap and disk space alert

I have enabled threat signature to capture single file only. but from last 3 days i see so many same threat logs with pcap done. i got email today of disk space alert i checked disk space show system disk-spaceFilesystem Size Used Avail Use% Mounted on/dev/md2 3.8G 3.3G 341M 91% //dev/md5 7.6G 3.4G 3.8G 48% /opt/pancfg/dev/md6 3.8G 2.7G 910M 76%...

MP18 by • Cyber Elite
  • 2750 Views
  • 1 replies
  • 0 Likes
  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks